Threats tagged 'ghsa-crrc-vpp2-f5x7'

Grav versions before 2.0.16 have an incomplete default denylist in the Twig sandbox configuration, which allows attackers with page-edit permissions to access sensitive system configuration secrets such as system.cache.redis.password when config_access is enabled. This vulnerability can lead to exposure of critical secrets through Twig templates.

Grav versions prior to 2.0.16 have a vulnerability in the Twig sandbox configuration where the default denylist is incomplete. This allows attackers with page-edit permissions to access sensitive system configuration secrets via Twig template functions like config.get() or config.toArray() when config_access is enabled.